Privacy Policy

§ 1. PERSONAL DATA CONTROLLER

The administrator of personal data processed via the website www.ideas.edu.pl and fan pages on social media is the IDEAS Research Institute (IB IDEAS) with its registered office in Warsaw, ul. Królewska 27 (00-060 Warsaw), entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0001167539, NIP: 5253042617, REGON: 541475394 (hereinafter: „we” or „IB IDEAS”).

You can contact us:

  • by email at: biuro@ideas.gov.pl
  • by phone at: 535 697 830 or
  • using the contact form on our website.

We maintain a social media profile: LinkedIn

We have appointed a Data Protection Officer – Damian Stachyra, whom you can contact in matters directly related to your personal data and its processing by sending an email to: iod@ideas.org.pl

§ 2. GENERAL PROVISIONS

  1. This Privacy Policy sets out the rules for processing personal data that we collect through various channels such as our website, social media fan page, contact form, emails, and other means of communication available to users. When processing data, we ensure that it is done in accordance with the law, in particular the General Data Protection Regulation („GDPR”).
  2. We take special care to protect your rights and freedoms, including protecting your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure.
  3. The personal data we process varies depending on how you interact with us and the purpose of processing.
  4. You are not obliged to provide us with the personal data we request. However, if you decide not to provide it, this may prevent you from using certain features available on the website, conducting correspondence, or providing information that requires user identification.
  5. We may share your data with entities that provide services to us that require such transfer - for example, IT system and IT service providers - and, depending on the content of your inquiry or other service provided to you and the resulting support, we may also need to share it with companies that provide postal, accounting, or legal services to us. In addition, we may share data with third parties for legal reasons, e.g., entities to whom we are required to provide data, in particular public administration bodies or bodies appointed to monitor compliance with and enforce the law.
  6. We also inform you that your data may be processed in an automated manner, i.e., transferred and stored in the communication management system we use.
  7. We or the entities we cooperate with may use the services of entities outside the European Economic Area, i.e., third countries. In such cases, before transferring personal data to them, we will ensure that cooperation with such entities is based on an appropriate legal basis (e.g., a decision of the European Commission confirming an adequate level of protection for the country concerned or the conclusion of standard contractual clauses) and that they provide adequate standards of protection.

§ 3. PERSONAL DATA, PURPOSES, AND BASES FOR PROCESSING

Data processing in connection with ongoing communication

When you contact us via the selected means of communication provided on the website (contact form, email, phone call), we may process your personal data in the following scope:

  • full name,
  • email address,
  • phone number,
  • other data provided during contact (e.g., message/conversation content, mailing address).

The purpose and legal basis for processing your data depends on the subject matter of the communication.

If you send us a message, we will process your personal data for purposes depending on the subject of your email or the content of the form you send, i.e. in the case of:

  • when correspondence is conducted in connection with the performance of a civil law contract to which you are a party, personal data is processed to the extent necessary to perform that contract and to handle related activities, pursuant to Article 6(1)(b) of the GDPR,
  • when correspondence is conducted in connection with the performance of a contract to which the organization you represent is a party, personal data is processed to the extent necessary for the performance of that contract, including in particular to ensure proper communication, pursuant to Article 6(1)(f) of the GDPR,
  • When you send us your CV (job application), we process your data for the purpose of recruiting candidates for future positions, pursuant to Article 6(1)(a) of the GDPR, i.e. your consent to participate in our future recruitment processes.,
  • when correspondence is conducted in connection with a request for access to public information, personal data is processed to the extent necessary to consider the request, respond to it, and fulfill the obligations arising from the provisions on access to public information, pursuant to Article 6(1)(c) of the GDPR,
  • when correspondence concerns other topics, we process your data in order to receive messages, deal with the matter, and respond to it, pursuant to Article 6(1)(f) of the GDPR, i.e., our legitimate interest in communicating on current issues and responding to questions asked.

When you contact us by phone, your personal data is processed in order to answer your questions and ensure efficient communication. The legal basis for this processing is our legitimate interest in handling inquiries and maintaining contact with persons interested in our activities (Article 6(1)(f) of the GDPR).

We may also process your personal data provided in the registration forms available on our website for events or competitions organized by us, to the extent necessary to process your application, confirm your participation, contact you for organizational purposes, and fulfill the obligations arising from the rules and regulations of a given event or competition. Each time, before providing data for the above-mentioned purposes, we inform you about the scope of its processing, legal basis, and your rights in a dedicated information clause.

Processing of personal data in connection with website management

When you use our website, we collect data about the device and IT system from which the connection is made, such as:

  • the IP address from which the connection is currently being made,
  • type and version of operating system and browser.

As a rule, the data provided does not allow us to identify the user. However, in situations where such identification would become possible under certain circumstances - e.g., in the event of a security incident or in connection with the obligation to protect our rights, the basis for the processing of personal data is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in operating and managing the website, ensuring its proper functioning and security, including the collection of server logs.

We use cookies and automated data collection tools, such as Google Analytics, to collect information about user behavior on the website. The scope of data collection includes aggregated:

  • information about the most frequently viewed subpages,
  • information about the time spent on the website or individual subpages,
  • information about the source of access to the website or individual subpages,

As a rule, aggregated information does not constitute personal data, as it does not allow for direct or indirect identification of the user. We use this data mainly for analytical and statistical purposes, as well as to optimize the functioning of the website and improve its usability. However, in certain cases, if it is combined with other data (e.g., data sent via contact forms or MAC or IP addresses), it may be considered personal data. In such a case, we will process it on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of our legitimate interest resulting from the investigation or defense against claims.

Data processing in connection with running fan pages

When you interact with us via our fan pages on social media sites such as LinkedIn, we may process the data you share in your public profile, such as your first and last name or username (nickname), image or avatar, place of residence, as well as information resulting from your activity on our fan page, including likes, comments, shares, and private messages sent to us.

We run our fan pages to promote our brand online and inform media users about our activities. At the same time, we provide an additional channel for communication and interaction with us.

The basis for processing your personal data in connection with the above purpose is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in promoting our brand online by sharing information about our activities and communicating with you.

Other purposes for processing your personal data

Regardless of the above purposes of processing, in the course of our business activities, a situation may arise in which the personal data we process for the above purposes may also be necessary to establish, pursue, or defend against claims.  

The basis for processing your personal data for the above purpose will be Article 6(1)(f) of the GDPR, i.e., our legitimate interest in defending our legal interests.

How long do we process your data?

If we process your data based on your consent, we'll process your personal data until we've achieved the purpose stated in your consent or until you withdraw your consent.

We will process personal data in connection with the performance of contractual provisions for the period necessary to perform the contract and fulfill the resulting legal obligations, i.e. until the claims arising from it become time-barred.

In the case of data processed on the basis of our legitimate interest, we will process it for the period necessary to achieve a specific purpose, until an effective objection to the processing is lodged or until the claims arising from this purpose become time-barred.

§ 4. WHAT ARE YOUR RIGHTS?

Your rights in relation to our processing of your personal data are:

  1. the right to request access to your personal data and to receive a copy thereof,
  2. the right to rectify your personal data,
  3. the right to delete your personal data,
  4. the right to restrict the processing of personal data,
  5. the right to transfer your personal data to another controller in relation to data processed on the basis of Article 6(1)(a), i.e. consent to participate in future recruitment processes and CVs sent to us,
  6. the right to object to the processing of personal data based on our legitimate interest, 
  7. the right to withdraw consent to the processing of data for future recruitment. Withdrawal of consent does not affect the lawfulness of processing that took place before its withdrawal,
  8. the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR – you will find the necessary information on this subject at www.uodo.gov.pl.

You can exercise your rights in accordance with the rules set out in Articles 15-22 of the GDPR by contacting us at the following e-mail address: biuro@ideas.gov.pl. You can also contact our data protection officer, Damian Stachyra, by sending an e-mail to iod@ideas.org.pl.

§ 5. SOCIAL MEDIA PROVIDERS

When running our fan pages, we use social media service providers such as LinkedIn Ireland Unlimited Company, which independently determines the rules for processing the data of users of this medium. This means that your data may be processed both by us for the purpose of communication and analysis of the effectiveness of our activities, as well as by the providers of these platforms, who may use your data for their own purposes, such as profiling, behavioral advertising, analytics, or content personalization - this is related to your acceptance of the terms and conditions of their website or other services.

The scope and manner of data processing by the platform operator are specified in the terms and conditions and privacy policies, which describe in detail what data is collected, for what purpose it is used, and what rights you have regarding its processing. We recommend that you review LinkedIn's privacy policies. The provider's privacy policy is available at: https://pl.linkedin.com/legal/privacy-policy.

§ 6. COOKIES

Our website uses cookies, which are small text files stored on your device (computer, smartphone, tablet) when you browse it. We use this technology to ensure the proper functioning of the website, including ensuring its safe use (necessary and functional files), analyzing traffic to monitor activity on the website (analytical files).

The cookies we use also include third-party cookies, which come from external providers of analytical, advertising, or social media services and tools. Most often, these will be

  • Google – provider of files as part of the Google Analytics tool, which enables website traffic analysis and the collection of statistical data on how the website is used.

During your first visit to our website, you have the option to accept or reject cookies via a pop-up window. You can also change your cookie preferences at any time using the CookieYes tool.

Changing your preferences, such as withdrawing your consent, will prevent us from collecting information from your device or using it for analytical purposes.

Regardless of your preferences regarding the use of cookies, you must remember that some of the cookies we use are necessary for the proper functioning of our website. You have no control over the use of these cookies.

The cookies we use also vary in terms of how long they are stored on your device. We currently use:

  • session files, which remain on the device until you leave our website or turn off the software (web browser). These are primarily functional cookies,
  • persistent files, which remain on the device for the time specified in the file parameters or until they are deleted from the browser's memory.
File name Supplier File function or description of operation Service life File type
 __cf_bm  Cloudflare  Obsługa serwisu  1 godzina  niezbędny
 elementor  Elementor  Motyw WordPress  Zawsze  niezbędny
 CookieYes  CookieYes  Preferencje zgody  1 rok  niezbędny
 rc::a  Google  Google ReCaptcha  Zawsze  niezbędny
Visitor Privacy Visitor Privacy Metadata  YouTube consents  6 miesięcy  niezbędny
ea11y-global Elementor  WCAG complient  Nigdy  niezbędny
YSC YouTube osadzanie filmów  sesja  analityka
Visitor info YouTube pomiar przepustowości  6 miesięcy  funkcjonalny
ea11y-session elementor ustawienia dostępności sesja  funkcjonalny

You can also manage cookie settings by configuring the web browser you use. In your browser settings, you can allow, restrict, or completely block the use of cookies on your device. In addition, most browsers allow you to set cookies to be automatically deleted when you close your browser or to periodically clear them from memory.

Below you will find links to sample instructions.

Browser Link
Microsoft Edge™ https://support.microsoft.com/pl-pl/microsoft-edge/usuwanie-plik%C3%B3w-cookie-w-przegl%C4%85darce-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox™ https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-danych-stron-firefox?re
Chrome™ https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl
Opera™ https://help.opera.com/pl/latest/web-preferences/
Safari™ https://support.apple.com/pl-pl/HT201265

§ 7. FINAL PROVISIONS

If we change the way we process your personal data, we will update this Privacy Policy. We reserve the right to make changes to our practices and the content of this Policy at any time. We will inform you of any updates by publishing a new version on our website.

Effective from: December 1, 2025.